From owner-freebsd-security Sat Aug 29 03:24:38 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id DAA10020 for freebsd-security-outgoing; Sat, 29 Aug 1998 03:24:38 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from lohi.clinet.fi (lohi.clinet.fi [194.100.0.7]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id DAA10015 for ; Sat, 29 Aug 1998 03:24:35 -0700 (PDT) (envelope-from hsu@mail.clinet.fi) Received: from katiska.clinet.fi (katiska.clinet.fi [194.100.0.4]) by lohi.clinet.fi (8.9.1/8.9.0) with ESMTP id NAA18352; Sat, 29 Aug 1998 13:22:39 +0300 (EEST) Received: (from hsu@localhost) by katiska.clinet.fi (8.9.0/8.9.0) id NAA00754; Sat, 29 Aug 1998 13:22:04 +0300 (EEST) From: Heikki Suonsivu MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <13799.54857.992544.259013@katiska.clinet.fi> Date: Sat, 29 Aug 1998 13:22:01 +0300 (EEST) To: Sean Kelly Cc: john , freebsd-security@FreeBSD.ORG Subject: Re: accounting. In-Reply-To: <35E715A7.34C01A22@plutotech.com> References: <199808281908.OAA16685@leonardo.cascss.unt.edu> <35E715A7.34C01A22@plutotech.com> X-Mailer: VM 6.47 under Emacs 19.34.1 Organization: Clinet Ltd, Espoo, Finland Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Sean Kelly writes: > > > accounting_enable="YES" > > But this doesn't seem to log the switches used for the program > > Yep ... that'd be a good feature! Add pid and ppid. Without them it is non-trivial to see what, say, that fingerd run "/bin/sh". > --Sean > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- Heikki Suonsivu / Clinet Oy / Tekniikantie 12 / FI-02150 Espoo / FINLAND, hsu@clinet.fi mobile +358-40-5519679 work +358-9-43542270 fax -4555276 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message